Netgear SRX5308 Specifications download pdf (Page 220)

Managing Users, Authentication, and Certificates

220

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308

determines the network resources to which the associated users have access. The default

domain of the VPN firewall is named geardomain. You cannot delete the default domain.

The following table summarizes the authentication protocols and methods that the VPN

firewall supports:

 To create a domain:

1. Select Users > Domains. The Domains screen displays. The following figure shows the

VPN firewall’s default domain—geardomain—and, as an example, several other

domains in the List of Domains table.

Table 55. Authentication protocols and methods

Authentication

protocol or method

Description

PAP Password Authentication Protocol (PAP) is a simple protocol in which the client sends a

password in clear text.

CHAP Challenge Handshake Authentication Protocol (CHAP) executes a three-way handshake

in which the client and server trade challenge messages, each responding with a hash of

the other’s challenge message that is calculated using a shared secret value.

RADIUS A network-validated PAP or CHAP password-based authentication method that functions

with Remote Authentication Dial In User Service (RADIUS).

MIAS A network-validated PAP or CHAP password-based authentication method that functions

with Microsoft Internet Authentication Service (MIAS), which is a component of Microsoft

Windows 2003 Server.

WiKID WiKID Systems is a PAP or CHAP key-based two-factor authentication method that

functions with public key cryptography. The client sends an encrypted PIN to the WiKID

server and receives a one-time pass code with a short expiration period. The client logs

in with the passcode. See Appendix D, Two-Factor Authentication for more on WiKID

authentication.

NT Domain A network-validated domain-based authentication method that functions with a Microsoft

Windows NT Domain authentication server. This authentication method has been

superseded by Microsoft Active Directory authentication but is supported to authenticate

legacy Windows clients.

Active Directory A network-validated domain-based authentication method that functions with a Microsoft

Active Directory authentication server. Microsoft Active Directory authentication servers

support a group and user structure. Because the Active Directory supports a multilevel

hierarchy (for example, groups or organizational units), this information can be queried to

provide specific group policies or bookmarks based on Active Directory attributes.

Note: A Microsoft Active Directory database uses an LDAP organization schema.

LDAP A network-validated domain-based authentication method that functions with a

Lightweight Directory Access Protocol (LDAP) authentication server. LDAP is a standard

for querying and updating a directory. Because LDAP supports a multilevel hierarchy (for

example, groups or organizational units), this information can be queried to provide

specific group policies or bookmarks based on LDAP attributes.

1 2 ... 215 216 217 218 219 220 221 222 223 224 225 ... 356 357

Comments to this Manuals

No comments

Netgear SRX5308 Specifications Page 220

Comments to this Manuals